Zero CORS Restrictions • Full Header Control

High-Performance Open Source
CORS Proxy Engine & Sandbox

Bypass cross-origin blocking, strip restrictive security headers (`X-Frame-Options` & `CSP`), and route HTTP API requests effortlessly across edge locations.

Launch Live Sandbox

< 25ms

Edge Overhead

100%

Open Source

0 Config

Cloudflare Pages Ready

Multi-Origin

Auto Failover

Interactive Live Sandbox

Test SCORS proxy requests in real time directly from your browser.

Quick Presets:

Idle 0 ms

Click "Execute Request" above to test the SCORS proxy engine.

Injected Response Headers

{
  "access-control-allow-origin": "*",
  "access-control-allow-methods": "GET, POST, PUT, DELETE, OPTIONS, HEAD",
  "access-control-allow-headers": "*"
}

Core Architecture & Features

Designed for maximum compatibility, performance, and developer control.

Anti-Frame Block Removal

Strips restrictive `X-Frame-Options: DENY` and `Content-Security-Policy` headers server-side, enabling seamless embedding of external sites in sandboxed iframes.

Multi-Gateway Failover

Smart client-side rotation automatically switches proxy gateways in real time if any single edge region experiences rate limiting or downtime.

Logo & Asset Auto-Repair

Injects automatic image error handlers into proxied HTML pages to dynamically re-route broken logos and images through the proxy safely.

Header Customization

Full support for custom HTTP request headers, authorization tokens (`Bearer`), and custom CORS keys on all outgoing requests.

Console Bridge & Scriptlets

Features a cross-origin postMessage bridge that captures console logs (`log`, `warn`, `error`) from inside embedded sandboxed frames.

Cloudflare Pages Direct Root

Deploy to Cloudflare Pages or Workers to host a zero-cost proxy at `https://scorsbackup.pages.dev/?Url=example.com`.

How SCORS Works

Serverless Edge Request Flow & Header Sanitization Pipeline

Client Web App

Issues fetch request to `https://scorsbackup.pages.dev/?Url=https://api.target.com/data`

SCORS Edge Proxy

Cleans request headers, forwards request to target, strips `X-Frame-Options` & `CSP`, and injects `Access-Control-Allow-Origin: *`

Target Server Response

Target returns payload/HTML safely to client without CORS or iframe blocking restrictions.

Integration Code Examples

Easily integrate SCORS into any client application or programming language.

fetch('https://scorsbackup.pages.dev/?Url=' + encodeURIComponent('https://api.example.com/data'))
  .then(res => res.json())
  .then(data => console.log(data))
  .catch(err => console.error(err));

1-Click Deployment to Cloudflare Pages

Host your own dedicated SCORS instance on your GitHub repo (`z6sGD/SCORS`).

1
Push to GitHub: Ensure your repository z6sGD/SCORS contains index.html and the functions/[[path]].js Cloudflare Pages route handler.
2
Connect to Cloudflare: Go to Cloudflare Dashboard → Workers & Pages → Create Application → Pages.
3
Select Repository & Deploy: Select z6sGD/SCORS, keep default build settings, and click Save and Deploy. Your proxy will be live at https://scorsbackup.pages.dev/!

High-Performance Open Source CORS Proxy Engine & Sandbox